Some notable new features include the update of our internal HTML Viewer, as well as adding some valuable new functionality to aid with evidence processing and productivity.
We have added support for the following browsers:
Basilisk is a free and Open Source XUL-based web browser, featuring the well-known Firefox-style interface and operation, created by the developers of the Pale Moon browser. It is based on the Goanna layout and rendering engine (a fork of Gecko) and builds on the Unified XUL Platform (UXP), which in turn is a fork of the Mozilla code base.
The developers describe Basilisk as "development software" and states "it should be considered more or less beta at all times; it may have some bugs and is provided as-is, with potential defects. It was initially released in November 2017 for Microsoft Windows and Linux.
Epic Privacy Browser
Epic Privacy Browser was released on August 29, 2013 and is developed by Hidden Reflex using the Chromium source code, developed for the security conscious. Epic Privacy Browser is (by default) always in "private browsing mode", taking a proactive approach to ensuring that session data (such as cookies, history, and cache etc.) are removed upon exit. The browser also removes Google tracking and blocks other organisations from tracking users.
Cốc Cốc Browser
Cốc Cốc browser is a primarily focused on the Vietnamese market. It is available for Windows and macOS operating systems and supports both the English and Vietnamese languages. It is developed by Vietnamese company Cốc Cốc and based on Chromium open source code. Cốc Cốc is the second most popular browser in Vietnam, with a market share of 16.89%, according to data from StatCounter.
QQ Browser (QQ浏览器) is a chromium-based web browser for Android, Windows, macOS, and iOS platforms. It is developed by Chinese Internet giant Tencent. The application offers a number of features such as tabbed windows and integration with chat platforms. QQ browser version 9.0 was the first released version which used the chromium source code (Chromium v43). Prior to this QQ Browser was based on the Trident engine.
New Support for Existing Browsers
Microsoft Edge Swept Tabs
Microsoft has added a feature to its Edge browser to make it easy to sweep aside all the tabs the user has open into a collection that can be restored at any time. We have now added support to NetAnalysis® for viewing these Swept Tab entries (see below).
The Recovery Guid shown above is a unique identifier which relates to Recovery Store entries (Tab Session ID). In the screen capture below, you can see we have created a filter looking for records that contain the Swept Tab Recovery Guid in the Information field. This filter returns three records which can be seen below.
Microsoft Edge Downloads
Another area we have improved, in this release, is the processing of the download information object for Microsoft browsers. We have greatly improved the processing of corrupt and partially recovered data through HstEx® and added support for all known versions of the download object (including those version released in beta and pre-release products).
We have also reformatted the output displayed in the Information panel, to make it clearer and easier to understand (see the screen capture below for an example).
Internal HTML Viewer
We have updated our internal viewer so that it supports the latest HTML standards and world wide web technology. We have also added some additional functionality which is accessible from the right-click context menu. The new items are as follows:
- Save as PDF - You can now save a rebuilt webpage (or other supported type) to a PDF file.
- Open Containing Folder - This will open an Explorer window and will highlight the source file for the content being displayed in the viewer.
- Open with External Viewer - This will send the content being displayed in the viewer to the default viewer for your system. For example, if the content relates to a video file, it will send the source to your default video player.
- Zoom - The zoom options allow the user to zoom in, out, or reset the zoom level to the content displayed in the viewer.